Software’s Sausage Factory: The Supply Chain

The article warns that modern global hardware and software supply chains are producing insecure embedded devices—exemplified by remote power management (RPM) units—with hidden administrative accounts, weak authentication, undocumented features, and inconsistent components; researchers from BorderHawk and Senrio found exploitable flaws and evidence some deployed RPM devices were compromised, highlighting risks to organizations and critical infrastructure and advising closer supplier relationships and greater scrutiny of hardware.